ENH: use ipmatches for action xarf-login-attack
Merge pull request #493 from grooverdan/xarf-ipmatch

ENH: use ipmatches for action xarf-login-attack